FAQ #1069 Diff

Does PCI DSS apply to paper with cardholder data (receipts, reports, etc.)?

Earlier Version
2008-02-24T00:00:00+00:00

Later Version
2014-05-28T00:00:00+00:00

Removed

Added

Yes, PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted by any media, including paper records. PCI DSS ~~requirements~~Requirements ~~9.6~~9.5 through ~~9.10~~9.8 specifically ~~address~~addresses the safeguarding of physical media, including paper ~~records~~records, containing cardholder data.

(Note: PCI DSS Requirement numbers refer to PCI DSS version 3)

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.